MAL-2025-192629 Malicious code in flagstealerfinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64b9cc9bb0bafe61901221efe8e6c9359eef4061151cc1a35544721addc6b8f2 The package flagstealerfinal was found to contain malicious code. Source: ghsa-malware eecc837f74a9e474ce6f056e83fc505b9f1126d18a96a5eb879def906682fd...

Malicious code in react-enhanced-glow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d6a21a6e0e2094ca1f9327d83a0c38da77bd3b8f8ffbad317ef4530a7d14c45 The package react-enhanced-glow was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-204013

Storybook manager bundle may expose environment variables during build...

CVE-2025-68429

This CVE (CVE-2025-68429) affects Storybook builds where environment variables in a .env file could be unintentionally bundled into the web-facing build artifacts. Vulnerable if you run storybook build in a directory containing .env (including .env.local) and then publish the built bundle. Affect...

Malicious code in vitor-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23bd6760c1b98479c10035033bae4ed585e80c762bf7fd4c79d45bdc990a852e The package vitor-js was found to contain malicious code. Source: ghsa-malware 59962d3857dd8e503c596b43fbb33337d27bea7c1f53e69a305e690913599163 Any...

MAL-2025-192603 Malicious code in vitor-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23bd6760c1b98479c10035033bae4ed585e80c762bf7fd4c79d45bdc990a852e The package vitor-js was found to contain malicious code. Source: ghsa-malware 59962d3857dd8e503c596b43fbb33337d27bea7c1f53e69a305e690913599163 Any...

MAL-2025-192602 Malicious code in plugin-senna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec44b28e2a98490c65ae2fbece390c2a69e10ce7635599d405977501ee25277e The package plugin-senna was found to contain malicious code. Source: ghsa-malware d7aaf417fb3dc9c862b43e668d1946f17795e33cfe873f11db2d309776b93b06 A...

Malicious code in plugin-senna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec44b28e2a98490c65ae2fbece390c2a69e10ce7635599d405977501ee25277e The package plugin-senna was found to contain malicious code. Source: ghsa-malware d7aaf417fb3dc9c862b43e668d1946f17795e33cfe873f11db2d309776b93b06 A...

Malicious code in tailwind-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50a9b7a9c02e83e0b4145dc9caaa9d04b407a199ae5d54b9f544f91397980966 The package tailwind-variables was found to contain malicious code. Source: ghsa-malware...

Malicious code in tailwind-stylecss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c71a662da2f505a840efadd0fae8fc82d44fe869c688fc1a5f4b7bf4d0a517 The package tailwind-stylecss was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192600 Malicious code in tailwind-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50a9b7a9c02e83e0b4145dc9caaa9d04b407a199ae5d54b9f544f91397980966 The package tailwind-variables was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192599 Malicious code in tailwind-stylecss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c71a662da2f505a840efadd0fae8fc82d44fe869c688fc1a5f4b7bf4d0a517 The package tailwind-stylecss was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192598 Malicious code in bigmathlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e535ed570f999285684c4f2a79ce262d460a98329790e34f433542070b9298 The package bigmathlib was found to contain malicious code. Source: ghsa-malware d73c91abd6a323d119e598928fc613100786424177806e36bb5ebd15f666de3e Any...

Malicious code in bigmathlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e535ed570f999285684c4f2a79ce262d460a98329790e34f433542070b9298 The package bigmathlib was found to contain malicious code. Source: ghsa-malware d73c91abd6a323d119e598928fc613100786424177806e36bb5ebd15f666de3e Any...

Malicious code in example-vue2-micro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cda06e9583d6e3b61afb6f1134f4d867559022d5844de0fbb5781312b8d5abc The package example-vue2-micro was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192586 Malicious code in dubbo-js-private-workspace (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7718e849fa01a112b317438650757b783681fbb3361ec73154005719f6f892 The package dubbo-js-private-workspace was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192593 Malicious code in openhands-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3094854e6f43f64c218e6ccdf21f319cff916fef4a412442faccf4b9cd616fe9 The package openhands-frontend was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192590 Malicious code in example-vue2-micro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cda06e9583d6e3b61afb6f1134f4d867559022d5844de0fbb5781312b8d5abc The package example-vue2-micro was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192591 Malicious code in i18never (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632dc2988c33d66794e0a132a9b305b8ea29788a777889291647e5a0514d51b2 The package i18never was found to contain malicious code. Source: ghsa-malware f8457dd91952dfd151549c2a5de56ff988a48ae31ebd0eae188e8a62999cb040 Any...

Malicious code in i18never (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632dc2988c33d66794e0a132a9b305b8ea29788a777889291647e5a0514d51b2 The package i18never was found to contain malicious code. Source: ghsa-malware f8457dd91952dfd151549c2a5de56ff988a48ae31ebd0eae188e8a62999cb040 Any...